DevTools: Don't allow native global functions in injected script.

Source/core/inspector/InjectedScriptSource.js

 /*
  * Copyright (C) 2007 Apple Inc.  All rights reserved.
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
@@ skipping 122 matching lines @@
  * @template T
  */
 function nullifyObjectProto(obj)
 {
     if (obj && typeof obj === "object")
         obj.__proto__ = null;
     return obj;
 }
 
 /**
+ * @param {*} obj
+ * @return {boolean}
+ */
+function isUInt32(obj)
+{
+    return typeof obj === "number" && obj >>> 0 === obj && (obj > 0 || 1 / obj > 0);
+}
+
+/**
  * FireBug's array detection.
  * @param {*} obj
  * @return {boolean}
  */
 function isArrayLike(obj)
 {
     try {
         if (typeof obj !== "object")
             return false;
         if (typeof obj.splice === "function")
-            return isFinite(obj.length);
+            return isUInt32(obj.length);
         var str = InjectedScriptHost.callFunction(Object.prototype.toString, obj);
         if (str === "[object Arguments]")
-            return isFinite(obj.length);
+            return isUInt32(obj.length);
     } catch (e) {
     }
     return false;
 }
 
 /**
  * @param {number} a
  * @param {number} b
  * @return {number}
  */
@@ skipping 1527 matching lines @@
      */
     _logEvent: function(event)
     {
         inspectedWindow.console.log(event.type, event);
     }
 }
 
 injectedScript._commandLineAPIImpl = new CommandLineAPIImpl();
 return injectedScript;
 })